CVE-2014-5302
Published Aug 28, 2017Directory traversal vulnerability in ServiceDesk Plus and Plus MSP v5 through v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4 allows remote authe…
Vendor/product archive
manageengine / servicedesk_plus CVEs
Beta · best-effort10 CVEs tagged to manageengine / servicedesk_plus — 0 Critical, 2 High, 8 Medium, 0 Low, 0 Unrated.
CVE-2014-5301
Published Aug 28, 2017Directory traversal vulnerability in ServiceDesk Plus MSP v5 to v9.0 v9030; AssetExplorer v4 to v6.1; SupportCenter v5 to v7.9; IT360 v8 to v10.4.
CVE-2015-1480
Published Feb 4, 2015ZOHO ManageEngine ServiceDesk Plus (SDP) before 9.0 build 9031 allows remote authenticated users to obtain sensitive ticket information via a (1) getTicketData action to servlet/A…
CVE-2012-2585
Published Aug 12, 2012Multiple cross-site scripting (XSS) vulnerabilities in ManageEngine ServiceDesk Plus 8.1 allow remote attackers to inject arbitrary web script or HTML via an e-mail message body w…
CVE-2011-1510
Published Sep 20, 2011Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus (SDP) before 8012 allows remote attackers to inject arbitrary web script or HTML via…
CVE-2011-1509
Published Sep 20, 2011The encryptPassword function in Login.js in ManageEngine ServiceDesk Plus (SDP) 8012 and earlier uses a Caesar cipher for encryption of passwords in cookies, which makes it easier…
CVE-2011-2757
Published Jul 17, 2011Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0.0.12 and earlier allows remote attackers to read arbitrary files via a .. (dot dot) in t…
CVE-2011-2756
Published Jul 17, 2011FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 does not require authentication, which allows remote attackers to read files from a specific directory via…
CVE-2011-2755
Published Jul 17, 2011Directory traversal vulnerability in FileDownload.jsp in ManageEngine ServiceDesk Plus 8.0 before Build 8012 allows remote attackers to read arbitrary files via unspecified vector…
CVE-2008-1299
Published Mar 12, 2008Cross-site scripting (XSS) vulnerability in SolutionSearch.do in ManageEngine ServiceDesk Plus 7.0.0 Build 7011 for Windows allows remote attackers to inject arbitrary web script…
Showing 1-10 of 10 CVEsPage 1 of 1